CVE-2004-0310

Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the stylesheet, which does…

published March 18, 2004

CVSS
—
EPSS
1%
Percentile
70.0
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the stylesheet, which does not strip the semicolon or parentheses, as demonstrated using a background:url.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01292 · 70.0th percentile
Published
2004-03-18T05:00Z
EPSS history
Timeline
  • 18 MAR 05:00Z
    Cross-site scripting (XSS) vulnerability in LiveJournal 1.0 and 1.1 allows remote attackers to execute Javascript as other users via the stylesheet, which does…
    cvelistv5